Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent) Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
Added 'trusted' option to expandEnvVars. Skill MCPs are user-controlled and now bypass the security allowlist. 3 files changed. TDD verified. tsc clean. Closes #3168